Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 21/09/2015 Updated: 30/09/2015

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M unintentionally omit the X-Frame-Options HTTP header, which makes it easier for remote malicious users to conduct clickjacking attacks via a crafted web site that contains a (1) FRAME, (2) IFRAME, or (3) OBJECT element.

Vulnerable Product	Search on Vulmon	Subscribe to Product
securifi almond_firmware
securifi almond-2015_firmware

CWE-20 http://www.kb.cert.org/vuls/id/906576 https://nvd.nist.gov https://www.kb.cert.org/vuls/id/906576

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-2917

Vulnerability Summary

References

Vulmon Search

About

Products

Connect